exploit-db-mirror/exploits/php/webapps/26437.txt
Offensive Security b4c96a5864 DB: 2021-09-03
28807 changes to exploits/shellcodes
2021-09-03 20:19:21 +00:00

9 lines
No EOL
561 B
Text

source: https://www.securityfocus.com/bid/15237/info
PHP Advanced Transfer Manager can allow remote attackers to gain unauthorized access.
Access to sensitive files containing authentication credentials is not restricted, therefore an attacker can simply issue a GET request to obtain a user's password hash. This information can then allow them to successfully authenticate to the service using a cookie.
PHP Advanced Transfer Manager 1.30 is reported to be vulnerable. Other versions may be affected as well.
http://www.example.com/phpATM/users/<username>